Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: uUxXzyyO2rJuyJkHXhSerGuUwb2akrWdKv3Alk1kHBk=
Subject key identifier: DC:DB:FF:1F:2C:A0:90:1D:45:FE:12:E4:72:BF:04:A9:10:BC:34:B5
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 0198D4E017DEC88F658C158972910A8D816E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 104C
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: 8pln+SRFv4xapmGWbVdz7UgNxMH8ifT8UzF574UJp2o=)
2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:17:de:c8:8f:65:8c:15:89:72:91:0a:8d:81:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=dcdbff1f2ca0901d45fe12e472bf04a910bc34b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:e7:a0:5b:75:11:78:7b:b1:b8:76:4e:ec:
03:41:9c:06:7d:ea:ad:44:0b:6f:00:72:7d:bb:59:
80:6b:70:7d:59:36:8d:a7:49:3a:a3:77:5c:52:43:
c3:6d:0e:ee:40:f6:bd:3a:5f:de:d4:7a:fc:e5:79:
a9:d1:67:f8:75:17:5b:b5:4b:85:5e:ee:65:08:ea:
bd:84:c7:7a:21:08:e9:cb:74:e5:55:10:41:83:36:
0d:cd:af:7c:54:58:a4:66:d2:b9:41:6c:a9:4b:a3:
7e:1a:f6:eb:67:5b:d4:e3:6b:cf:b0:26:a8:2d:56:
d8:b5:c2:58:d4:64:f5:c6:00:e9:ed:99:ce:bd:77:
17:ff:52:6b:ff:3d:38:1a:c5:6d:ce:de:cd:85:42:
81:b8:e0:20:6a:a4:c0:9e:aa:72:91:64:8a:19:a7:
21:3e:78:d7:35:d7:e3:5e:46:e0:ac:bd:5c:c0:1d:
ad:38:2c:3c:22:f6:76:8f:99:8f:04:16:58:2d:a8:
24:80:1d:4d:96:46:19:fd:35:86:1e:9d:65:80:65:
5f:f7:6c:ec:44:a5:d4:c9:90:06:3a:9e:ca:e6:ab:
b3:74:cc:0a:6e:0a:13:80:8c:e2:88:68:de:26:e2:
ef:eb:89:7f:e5:c7:32:1a:65:0d:1e:32:49:6a:06:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:FF:1F:2C:A0:90:1D:45:FE:12:E4:72:BF:04:A9:10:BC:34:B5
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4b:68:79:e3:d5:0a:7b:7f:79:c2:08:df:31:25:af:6d:df:
9b:12:73:0b:0d:4f:cb:1b:61:09:26:33:94:60:0d:b8:68:44:
bb:75:56:6d:ec:86:a9:10:9c:e5:86:0f:93:7c:be:52:20:91:
43:d2:a5:ec:e0:dc:b9:e6:37:c0:1c:28:47:b2:dc:58:38:4f:
86:d7:5e:e1:a9:76:47:7d:16:43:17:22:61:64:bc:03:7e:c1:
45:0a:2f:fd:89:88:91:90:33:b4:68:56:d4:40:cb:8f:9a:c7:
8b:25:dd:92:3e:48:52:a4:ab:fa:8e:59:3a:97:7c:77:12:a0:
52:4c:29:2a:ac:bd:d6:88:b6:37:63:ed:b6:14:d1:27:23:61:
eb:60:d3:df:7d:d8:78:a6:3b:1d:a3:4d:f5:67:10:48:5b:ea:
98:6f:ad:45:09:57:94:4b:02:7e:39:7f:29:0d:13:97:be:15:
50:63:63:58:5c:89:1e:37:6c:a8:cb:6e:5b:a4:93:49:62:a7:
eb:fb:4a:24:b0:08:2d:d5:f4:76:9f:5a:28:f6:51:38:4b:4c:
ac:b5:7b:9a:82:22:57:a6:22:3d:c1:7b:b0:ca:59:b8:69:2a:
bc:fc:84:e6:9c:c4:a9:6c:e8:bf:42:d2:b6:20:65:99:df:7f:
08:b8:9d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4BfeyI9ljBWJcpEKjYFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk
MGM5ODMwHhcNMjUwODIzMDMwMTUyWhcNMjUwODI0MDMwMTUyWjAzMTEwLwYDVQQD
EyhkY2RiZmYxZjJjYTA5MDFkNDVmZTEyZTQ3MmJmMDRhOTEwYmMzNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugvnoFt1EXh7sbh2TuwDQZwGfeqt
RAtvAHJ9u1mAa3B9WTaNp0k6o3dcUkPDbQ7uQPa9Ol/e1Hr85Xmp0Wf4dRdbtUuF
Xu5lCOq9hMd6IQjpy3TlVRBBgzYNza98VFikZtK5QWypS6N+GvbrZ1vU42vPsCao
LVbYtcJY1GT1xgDp7ZnOvXcX/1Jr/z04GsVtzt7NhUKBuOAgaqTAnqpykWSKGach
PnjXNdfjXkbgrL1cwB2tOCw8IvZ2j5mPBBZYLagkgB1NlkYZ/TWGHp1lgGVf92zs
RKXUyZAGOp7K5quzdMwKbgoTgIziiGjeJuLv64l/5ccyGmUNHjJJagbrfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzb/x8soJAdRf4S5HK/BKkQvDS1MB8GA1UdIwQY
MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt
ZWJiYmI0NDQyODZlLzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl
LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEtoeePV
Cnt/ecII3zElr23fmxJzCw1PyxthCSYzlGANuGhEu3VWbeyGqRCc5YYPk3y+UiCR
Q9Kl7ODcueY3wBwoR7LcWDhPhtde4al2R30WQxciYWS8A37BRQov/YmIkZAztGhW
1EDLj5rHiyXdkj5IUqSr+o5ZOpd8dxKgUkwpKqy91oi2N2PtthTRJyNh62DT333Y
eKY7HaNN9WcQSFvqmG+tRQlXlEsCfjl/KQ0Tl74VUGNjWFyJHjdsqMtuW6STSWKn
6/tKJLAILdX0dp9aKPZROEtMrLV7moIiV6YiPcF7sMpZuGkqvPyE5pzEqWzov0LS
tiBlmd9/CLid0Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:11 2025 by rpki-client